# CVEs published 2008-11-17 30 CVEs were published on November 17, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2006-5268](https://cve.now/CVE-2006-5268.md): Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to (no CVSS) - [CVE-2006-5269](https://cve.now/CVE-2006-5269.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2007-0072](https://cve.now/CVE-2007-0072.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2007-0073](https://cve.now/CVE-2007-0073.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2007-0074](https://cve.now/CVE-2007-0074.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2008-0012](https://cve.now/CVE-2008-0012.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2008-0013](https://cve.now/CVE-2008-0013.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2008-0014](https://cve.now/CVE-2008-0014.md): Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2008-4415](https://cve.now/CVE-2008-4415.md): Unspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated users to execute arbitrary code via unknow (no CVSS) - [CVE-2008-4832](https://cve.now/CVE-2008-4832.md): rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a director (no CVSS) - [CVE-2008-5025](https://cve.now/CVE-2008-5025.md): Stack-based buffer overflow in the hfs\_cat\_find\_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to (no CVSS) - [CVE-2008-5111](https://cve.now/CVE-2008-5111.md): Unspecified vulnerability in the socket function in Sun Solaris 10 and OpenSolaris snv\_57 through snv\_91, when InfiniBand hardware is not in (no CVSS) - [CVE-2008-5112](https://cve.now/CVE-2008-5112.md): The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt (no CVSS) - [CVE-2008-5113](https://cve.now/CVE-2008-5113.md): WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to condu (no CVSS) - [CVE-2008-4824](https://cve.now/CVE-2008-4824.md): Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute (no CVSS) - [CVE-2008-5108](https://cve.now/CVE-2008-5108.md): Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR applicat (no CVSS) - [CVE-2008-5110](https://cve.now/CVE-2008-5110.md): syslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the intended jail. (no CVSS) - [CVE-2008-3623](https://cve.now/CVE-2008-3623.md): Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod (no CVSS) - [CVE-2008-3644](https://cve.now/CVE-2008-3644.md): Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local u (no CVSS) - [CVE-2008-4216](https://cve.now/CVE-2008-4216.md): The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attacker (no CVSS) - [CVE-2008-5098](https://cve.now/CVE-2008-5098.md): Cross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2008-5099](https://cve.now/CVE-2008-5099.md): Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password vari (no CVSS) - [CVE-2008-5100](https://cve.now/CVE-2008-5100.md): The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the p (no CVSS) - [CVE-2008-5101](https://cve.now/CVE-2008-5101.md): Buffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to execute arbitrary code via a crafted BMP image, (no CVSS) - [CVE-2008-5102](https://cve.now/CVE-2008-5102.md): PythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote authenticated users to cause a denial of serv (no CVSS) - [CVE-2008-5103](https://cve.now/CVE-2008-5103.md): The (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpassw (no CVSS) - [CVE-2008-5104](https://cve.now/CVE-2008-5104.md): Ubuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm-builder or (2) ubuntu-vm-builder in VMBuilde (no CVSS) - [CVE-2008-5105](https://cve.now/CVE-2008-5105.md): KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, ( (no CVSS) - [CVE-2008-5106](https://cve.now/CVE-2008-5106.md): Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute (no CVSS) - [CVE-2008-5107](https://cve.now/CVE-2008-5107.md): The installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI logging is enabled, stores database credentials (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-11-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.